Privacy Policy | Sterling Infrastructure

Last Updated: November 2025

1. Introduction

Sterling Infrastructure Pty Ltd (ABN: 88 139 882 376) ("Sterling", "we", "us", or "our") is committed to protecting your privacy and complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website (sterling.com.au) or engage with our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

- Contact Information: Name, email address, phone number, postal address

- Professional Information: Company name, job title, business contact details

- Employment Information: Resume/CV, qualifications, work history (for job applicants)

- Communications: Records of your communications with us, including emails and phone calls

- Technical Information: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on pages

2.2 How We Collect Information

We collect personal information through:

- Direct Interactions: When you contact us, request information, apply for a job, or engage our services

- Automated Technologies: Cookies, log files, and similar technologies when you visit our website

- Third Parties: Business partners, service providers, publicly available sources, or professional networks

2.3 Cookies

Our website uses cookies to:

- Remember your preferences and settings

- Analyze website traffic and usage patterns

- Improve website functionality and user experience

You can control cookies through your browser settings, but disabling cookies may affect website functionality.

3. How We Use Your Information

3.1 Primary Purposes

We use your personal information to:

- Provide our engineering and infrastructure consulting services

- Respond to your inquiries and communications

- Process job applications and manage recruitment

- Send you information about our services (with your consent)

- Improve our website and services

- Comply with legal obligations

- Prevent fraud and ensure website security

3.2 Marketing Communications

We may send you marketing communications about our services if:

- You have requested information or expressed interest in our services

- You have provided consent to receive marketing communications

- We have a legitimate business interest and you have not opted out

You can unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting us directly.

4. Disclosure of Your Information

4.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in:

- Website hosting and maintenance

- Email communications and marketing platforms

- Analytics and performance monitoring

- Recruitment and HR services

- Professional advisors (lawyers, accountants, consultants)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Business Transfers

If Sterling Infrastructure Pty Ltd is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if necessary to:

- Protect our rights, property, or safety

- Prevent fraud or illegal activity

- Enforce our terms and conditions

4.4 No Sale of Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Data Security

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your personal information against:

- Unauthorized access or disclosure

- Accidental loss or destruction

- Misuse, interference, or modification

Our security measures include:

- Secure servers and encrypted data transmission (SSL/TLS)

- Access controls and authentication requirements

- Regular security assessments and updates

- Staff training on privacy and data protection

5.2 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we will securely delete or de-identify it.

6. Your Rights and Choices

6.1 Access and Correction

Under the Privacy Act 1988, you have the right to:

- Access: Request access to the personal information we hold about you

- Correction: Request correction of inaccurate or incomplete information

- Deletion: Request deletion of your personal information (subject to legal requirements)

To exercise these rights, please contact us using the details provided in Section 11.

6.2 Complaints

If you believe we have breached the Australian Privacy Principles, you have the right to make a complaint. We will:

- Acknowledge your complaint within 7 days

- Investigate and respond within 30 days

- Work with you to resolve the issue

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

- Website: www.oaic.gov.au

- Phone: 1300 363 992

- Email: enquiries@oaic.gov.au

7. International Data Transfers

Your personal information may be stored on servers located outside Australia, including:

- Cloud hosting providers in the United States or Europe

- Service providers in other jurisdictions

When we transfer your information overseas, we take reasonable steps to ensure it receives a standard of protection substantially similar to the protection under the APPs.

8. Third-Party Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party websites you visit.

9. Children's Privacy

Our website and services are not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

10. Google Analytics

We use Google Analytics to analyze website traffic and usage. Google Analytics uses cookies to collect information such as:

- Pages visited and time spent on pages

- Geographic location (city/country level)

- Device and browser information

This information is used in aggregate form to improve our website. For more information about Google Analytics, visit: https://policies.google.com/privacy

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Sterling Infrastructure Pty Ltd

Privacy Officer

Email: accounts@sterling.com.au

Phone: (03) 9448 2321

Postal Address: 105 Bakehouse Rd, Kensington VIC 3031, Australia

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

- Posting the updated policy on our website

- Updating the "Last Updated" date at the top of this policy

- Sending you an email notification (for significant changes)

Your continued use of our website and services after such changes constitutes your acceptance of the updated Privacy Policy.

---

Acknowledgment: This Privacy Policy is designed to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For more information about privacy law in Australia, visit the Office of the Australian Information Commissioner at www.oaic.gov.au.